Maintenance status


This page outlines the current maintenance status of Composr.

Branch maintenance

As based on our policy described in our Problem and feedback reports, and development policies tutorial, current Composr branches are maintained as follows…

Branch Git branch Latest version Released On Branch Status
10.x master 10.0.50 17th Aug 2024, 8:43 PM Long-term maintenance
10.1.x v10.1 10.1 beta23 17th May 2008, 8:04 AM EOL
11.x v11 11.beta4 16th Oct 2024, 2:56 PM Beta
11.x v11_cloud 11.alpha1 17th May 2008, 8:04 AM Alpha
9.x 9.0.37 EOL

Branch statuses:
  • Alpha: Not all planned features have been implemented yet. Bugs, including critical ones and security issues, are expected. Do not use in production; it will probably not work well.
  • Beta: All planned features have been implemented (although that does not necessarily mean more won't be added), but bugs and potential security issues are still expected. The branch could be used in production at your own risk, but it is not recommended.
    • Release Candidate versions also fall under the beta status.
  • Mainline: This branch is stable and is receiving bug fixes and periodic new features. Most suitable for production where you would like the latest and greatest.
  • Supported: This branch is considered "final". It is still receiving bug fixes, but it is not receiving any new features. Most suitable for production where stability (especially of the API) is critical.
  • Long-term maintenance: This branch is only receiving fixes for critical bugs or security vulnerabilities that affect multiple people. Can be used in production, but you might encounter bugs which won't be fixed by the core team. Consider upgrading as soon as possible.
  • EOL: End of life. This branch is not receiving any more updates (including bug fixes) and may contain bugs and security issues. Do not use for production; you should promptly upgrade.

Feature maintenance

Composr is an enormous system that contains a number of highly specialist features as well as integration with third-party systems that are subject to unpredictable change.

It isn't feasible for the core developers to guarantee all this will keep working as things evolve internally and externally, often at a rapid pace outside our control. This is especially true when the available developer power for Composr is low.

We track functionality that has a moderate to high risk of breakage. This:
  1. Helps us provide a reliable product and ecosystem by informing users of what they need to keep an eye on and budget for if they want support for said feature
  2. Allows us to encourage funding / sponsorships or hiring developers within the community for on-going support of rare or fragile functionality (we think it's fair for the up-keep of highly specialist and advanced functionality to be directly paid for by those who need it)
  3. Allows us to mark off unreliable functionality so that we don't need to force core developers to maintain every specialist cross-cutting feature that has ever been added to Composr (sometimes things are worth keeping, but only worth actively maintaining if there's funding or a large user-base)
  4. Helps direct testing efforts
  5. Provides us a broad reminder of what needs on-going reappraisal
Further discussion and justification may be found in and directed to the original tracker issue.

Bugs may be reported for non-actively-maintained functionality. However, the speed at which they will be fixed (or if they get fixed at all) will depend on developer availability and their sense of priority. Additionally, most tracker issues for features not maintained will be marked off as sponsorship, meaning they are subject to members sponsoring the issue or hiring someone to do it.

Sponsorship

Sponsorship involves taking direct responsibility including testing and bug fixing, or paying someone (e.g. a Composr partner) to do that. In some cases it may also involve taking some up-stream responsibility, funding or maintaining frameworks or projects that Composr functionality is depending on.

The cost of sponsoring functionality may vary greatly depending on the amount of time and effort needed to maintain said feature. And costs are at the discretion of the individual or company you wish to hire.

Note that sponsoring functionality initially is not the same as sponsoring on-going maintenance. Once something is implemented and delivered there isn't a guarantee it can be maintained forever without on-going sponsorship (and it usually will not).

Maintenance status table

The table below outlines the current status of features which have an elevated risk of breaking. The table also outlines the current status of maintenance (e.g. which individual / company is actively maintaining each feature). Any features which do not have a listing for "Actively bug-fixed by" are likely broken in Composr (or could get broken in the future).

If you see a feature here that you would like to sponsor for bug fixes and/or maintenance, consider hiring a Composr partner to do so. Or, if you would like to maintain it yourself, consider making a merge request on our repository for the feature you want to maintain (fixing something or adding a new feature), and then contacting us so we can list you here (choose free options, make a partnership inquiry).

Title Actively Bug-Fixed by Actively Maintained by Notes Non-bundled addon Testing automation
Bing Translator integration Composr Core Development Team Composr Core Development Team Could potentially break due to third-party changes. No _api_translation automated test.
Mobile Chrome (Android & iOS) support Composr Core Development Team Composr Core Development Team Could potentially break due to third-party changes. No None
Android Browser support (pre-Chrome) Composr Core Development Team None Not regularly tested. Could potentially break due to third-party changes. No None
Chrome/Opera/Blink support Composr Core Development Team Composr Core Development Team Could potentially break due to third-party changes. No None
Firefox support Composr Core Development Team Composr Core Development Team Could potentially break due to third-party changes. No None
Mobile Safari (iOS) support Composr Core Development Team Composr Core Development Team Could potentially break due to third-party changes. No None
IE/Microsoft Edge support Composr Core Development Team Composr Core Development Team Could potentially break due to third-party changes. No None
Safari support Composr Core Development Team None Could potentially break due to third-party changes. No None
APC/APCu persistent cache Composr Core Development Team None Not regularly tested due to needing a testing platform. No None
Persistent cache via filesystem Composr Core Development Team None Not regularly tested. Liable to break due to cross-cutting complexity. No None
Memcache persistent cache None None Not regularly tested due to needing a testing platform. No None
Memchanged persistent cache None None Not regularly tested due to needing a testing platform. No None
Zend OpCache Composr Core Development Team PDStig, LLC Not regularly tested due to needing a testing platform. No None
WinCache persistent cache Composr Core Development Team None Not regularly tested due to needing a testing platform. No None
XCache persistent cache None None Not regularly tested due to needing a testing platform. No None
Character sets None None Not regularly tested. No None
Cloudflare optimisations (potentially-disruptive optimisations Cloudflare may try and make when proxying the site) PDStig, LLC PDStig, LLC Not regularly Tested. No None
Cloudflare true IP detection (a list of Cloudflare IPs to trust) Composr Core Development Team PDStig, LLC Not regularly Tested. No Part of release process / __special_links and cloudflare_ip_range_sync automated tests.
Magic click / context menu features Composr Core Development Team None Not regularly tested. No None
Running across multiple domains and Cross-Origin Resource Sharing (CORS) Composr Core Development Team None Not regularly Tested. No None
ISO countries (internal list) and flag images Composr Core Development Team None Could potentially break due to political changes. No None
CPF encryption Composr Core Development Team None Not regularly tested. No encryption automated test (back-end testing only).
Currency conversion Composr Core Development Team None Could potentially break due to third-party changes. No None
ISO currencies (internal list) Composr Core Development Team None Could potentially break due to political changes. No _api_currency automated test.
Theme Wizard: Dark themes Composr Core Development Team Composr Core Development Team It is easy for dark theme support to break if not tested after any CSS changes. No None
IBM DB2 database driver None None Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes. No Partly tested by database_misc automated test. Partly tested by running of full test set.
Oracle database driver None None Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes. No Partly tested by database_misc automated test. Partly tested by running of full test set.
PostgreSQL database driver None None Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes. No Partly tested by database_misc automated test. Partly tested by running of full test set.
Microsoft SQL server database driver None None Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes. No Partly tested by database_misc automated test. Partly tested by running of full test set.
XML database driver Composr Core Development Team None Intended for developers only. Does not currently work on Windows due to patch length limitations. No Partly tested by _installer_xml_db automated test. Partly tested by running of full test set.
Configuration of multiple database servers (with only one taking write queries) None None Not regularly tested. No None
Bot detection (user-agent list, IP safelist, and DNS safelist) Composr Core Development Team None Not regularly tested. Could potentially break due to third-party changes. No Partly tested by ua_detection automated test.
Mobile user agent detection Composr Core Development Team None Not regularly tested. Could potentially break due to third-party changes. No Partly tested by ua_detection automated test.
Download PDF search indexing Composr Core Development Team None Not regularly Tested. No download_indexing automated test.
E-mail integration Composr Core Development Team None Not regularly tested for all e-mail environments and setups. No None
Provide EU cookie warning Composr Core Development Team None Not regularly tested, depends on the third-party library Silktide. No None
Download of EU digital tax rates Composr Core Development Team None Could potentially break due to third-party changes. No _api_ecommerce_tax automated test.
Various tools that the Health Check will link out to when manual checks are enabled. Composr Core Development Team None Not regularly Tested. No Partly tested by __special_links automated test.
Recommended links on staff dashboard, and accuracy of external URLs in general Composr Core Development Team None Not regularly tested. Could potentially break due to third-party changes. No _broken_links automated test.
Permission/eCommerce/profile logging features Composr Core Development Team None Not fully manually tested. No Partly tested by extra_logging automated test.
FFMPEG thumbnail generation None None Not regularly tested. Could potentially break due to third-party changes. No None
"Show forum within website" option None None Not regularly tested and has the potential for instability. No None
Invision Board forum driver None None Not regularly tested. Out-dated. Needs ongoing maintenance. No Partly tested by running of full test set
MyBB forum driver None None Not regularly tested. May become out-dated. Needs ongoing maintenance. No Partly tested by running of full test set
No forums or members forum driver None None Not regularly tested. Liable to break due to cross-cutting complexity. No Partly tested by running of full test set
phpBB forum driver None None Not regularly tested. May become out-dated. Needs ongoing maintenance. No Partly tested by running of full test set
Simple Machine Forum forum driver None None Not regularly tested. Out-dated. Needs ongoing maintenance. No Partly tested by running of full test set
vBulletin forum driver None None Not regularly tested. Out-dated. Needs ongoing maintenance. No Partly tested by running of full test set
Burning Board forum driver None None Not regularly tested. Out-dated. Needs ongoing maintenance. No Partly tested by running of full test set
Authorize.net eCommerce driver None None Not regularly tested. Could potentially break due to third-party changes. No None
CCBill eCommerce driver None None Not regularly tested. Could potentially break due to third-party changes. No None
PayPal eCommerce driver Composr Core Development Team None Could potentially break due to third-party changes. No Partly tested by usergroup_subscriptions automated test.
Bing Geocoding (forward and reverse) Composr Core Development Team Composr Core Development Team Could potentially break due to third-party changes. No __api_geocoding automated test.
Google Geocoding (forward and reverse) None None Not regularly tested due to Google making this a paid service. Could potentially break due to third-party changes. No __api_geocoding automated test.
MapQuest Geocoding (forward and reverse) Composr Core Development Team Composr Core Development Team Could potentially break due to third-party changes. No __api_geocoding automated test.
Google Analytics integration. Composr Core Development Team None Not regularly Tested. No None
Google reCAPTCHA Composr Core Development Team None Not regularly Tested. No __health_check automated test to run Health Checks.
The Google Safe Browsing API. Composr Core Development Team None Not regularly Tested. No __health_check automated test to run Health Checks.
The Google Search Console API. Composr Core Development Team None Not regularly Tested. No None
Google Translate integration Composr Core Development Team Composr Core Development Team Could potentially break due to third-party changes. No _api_translation automated test.
Gravatar Composr Core Development Team None Not regularly tested. Could potentially break due to third-party changes. No None
HTTP proxy support Composr Core Development Team None Not regularly tested due to needing a testing platform. No None
HTTP authentication None None Not regularly tested. No Partly tested by httpauth automated test.
"Composr site merger" importer Composr Core Development Team None Not regularly tested. Site merging is not a substitute for upgrading. No None
HTML website importer None None Not regularly tested and has the potential for instability. No None
Invision Board importer None None Needs ongoing maintenance, and liable to be ineffective as people need plugin data importing too. No None
myBB importer None None Needs ongoing maintenance, and liable to be ineffective as people need plugin data importing too. No None
phpBB importer None None Needs ongoing maintenance, and liable to be ineffective as people need plugin data importing too. No None
Simple Machine Forum importer None None Needs ongoing maintenance, and liable to be ineffective as people need plugin data importing too. No None
vBulletin importer None None Needs ongoing maintenance, and liable to be ineffective as people need plugin data importing too. No None
Wordpress importer None None Needs ongoing maintenance, and liable to be ineffective as people need plugin data importing too. No None
Infinite scrolling Composr Core Development Team None None No None
Inline Editing Composr Core Development Team None Not regularly Tested, and themes are not typically expected to support it out-of-the-box. No None
APS installer None None We maintain builds via an automated process. Not regularly tested due to needing a testing platform. No None
Installatron installer Composr Core Development Team None We maintain builds via an automated process. Not regularly tested due to needing a testing platform. No None
IP address geocoding (internal list) Composr Core Development Team Composr Core Development Team Could potentially break due to third-party changes. No Part of release process / __api_geocoding automated test.
Links to external IP address tools Composr Core Development Team None Not regularly tested. Could potentially break due to third-party changes. No Partly tested by __special_links automated test.
Looking up metadata for IP addresses Composr Core Development Team None Could potentially break due to third-party changes. No Tested by _api_ipstack automated test.
iTunes podcasts None None Not regularly tested in iTunes. No Partially tested by feeds_and_podcasts automated test.
Non-English languages None None Not regularly tested due to needing contributors who understand other languages to provide translations. No Partly tested / utilised by _api_transifex
American English Composr Core Development Team None We automatically can convert most British English to American English, but it is not perfectly tested. No us_english automated test.
LDAP None None Not regularly tested due to the complexity of having multiple working LDAP test environments. No None
full Google Analytics cookies Composr Core Development Team Composr Core Development Team Not regularly tested. Could potentially break due to third-party changes. No None
Maintain support for MariaDB Composr Core Development Team PDStig, LLC Not regularly tested with versions above 10.6. Could potentially break due to third-party changes, although they do claim MySQL-compatibility. No None
Moz API. Composr Core Development Team None Not regularly Tested. No _api_moz automated test.
Multi-site-networks None None Not regularly tested. Liable to break due to cross-cutting complexity. No Partly tested by db_correctness automated test, and run-time driver use detection. Partly tested by running of full test set.
Content translations Composr Core Development Team None Not regularly tested. Liable to break due to cross-cutting complexity. No Randomised mode at dev install. Partly tested by running of full test set.
Maintain with new versions of MySQL Composr Core Development Team PDStig, LLC Not regularly tested with versions higher than 8.2. Could potentially break due to third-party changes. No None
Postmark spam-check integration Composr Core Development Team None Could potentially break due to third-party changes. No newsletters automated test.
Lists of IPs to not block Composr Core Development Team None Not regularly Tested. No Part of release process / __special_links automated test.
Default oEmbed configuration Composr Core Development Team None Not regularly Tested. No oembed automated test.
Development options in config_editor.php Composr Core Development Team None Not regularly tested. No None
Hidden options Composr Core Development Team None Not regularly tested. Mostly intended for developers or very low-level configuration. No None
Linux servers Composr Core Development Team Composr Core Development Team None No None
Mac OS servers Composr Core Development Team None Not regularly tested due to needing a testing platform. No None
Windows servers Composr Core Development Team Composr Core Development Team None No None
Maintain with new versions of PHP Composr Core Development Team Composr Core Development Team Not regularly tested with versions below 7.4 or above 8.3. Could potentially break due to third-party changes. No None
Detect if a PHP version is used that is no longer maintained by PHP developers. Composr Core Development Team None Not regularly Tested. Could potentially break due to third-party changes. No php_versioning automated test.
Apache Composr Core Development Team Composr Core Development Team None No None
Non-suEXEC platform support Composr Core Development Team None Not regularly tested. Likely to be very un-friendly to the admin, so should be discouraged. No None
cPanel Control Panel None None Not regularly tested. Can make changes to site behaviour which disrupt functionality. No None
Google App Engine platform support None None Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes. No None
IIS None None Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes. No None
LiteSpeed None None Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes. No None
ModSecurity Composr Core Development Team PDStig, LLC Not regularly tested. Could potentially break due to third-party changes. No Fake ModSecurity implemented in dev-mode.
NGINX PDStig, LLC PDStig, LLC Not regularly tested. Only intended to work with Apache as a back-end and the NGINX static cache disabled. No None
Peach Pie platform support None None Not regularly tested due to needing a testing platform. Could potentially break due to third-party changes. No None
Plesk Control Panel PDStig, LLC PDStig, LLC Not regularly tested. Can make changes to site behaviour which disrupt functionality. No None
Suhosin Composr Core Development Team None Not regularly tested. Could potentially break due to third-party changes. No None
POP3 e-mail accounts None None We allow configuration of using POP3 instead of IMAP for various inbox checking features but do not actively test it works (it relies on PHP's IMAP addon supporting POP3 well) No None
Aggressive pop-up blockers Composr Core Development Team None Some pop-up blockers (E.g. "Better pop-up blocker" on Chrome") may break common JavaScript. We try and workaround it, but it is not regularly tested. No None
Project Honeypot integration Composr Core Development Team PDStig, LLC Not regularly tested. Could potentially break due to third-party changes. No None
Remote Block List integration Composr Core Development Team None Not regularly tested. Could potentially break due to third-party changes. No None
Stability when the database is read-only (if a webhost has locked out write access due to quota issues) None None Not regularly tested. No None
Rootkit detector Composr Core Development Team None Not compatible with all systems. Intended for developers. No Partly tested by rootkit_detection automated test.
Shippo integration for shipping calculations Composr Core Development Team None Could potentially break due to third-party changes. No ecommerce_shipping automated test.
XML Sitemap auto-submit None None Out-dated as Google and Bing no longer have a method to auto-submit sitemaps. No sitemap_submit automated test.
SMS notifications None None Not regularly tested. Could potentially break due to third-party changes. No None
Basic social media / instant messenger linkage Composr Core Development Team None Not regularly tested. Could potentially break due to third-party changes. No None
SSL certificate trust chains (internal list) Composr Core Development Team None Could potentially break due to third-party changes. No Part of release process / __special_links automated test.
Manual compliance checks for ATAG and WCAG Composr Core Development Team None Active manual checks such as checking contrast, or having active testing sessions, would be a significant cost. No Automated web standards tests.
Microformats compliance Composr Core Development Team None Not regularly tested. No Partly tested by microformats automated test.
Support users without cookies Composr Core Development Team None May break site functionality and prevent the user from being able to log in. No None
Support users without JavaScript None None Not tested. Most modern web browsers make JavaScript mandatory. Therefore, we make an assumption that JavaScript will always be available. No None
Open Graph Composr Core Development Team None Not regularly tested. Could potentially break due to third-party changes. No None
schema.org compliance Composr Core Development Team None Not regularly tested. No None
Stop Forum Spam integration Composr Core Development Team Composr Core Development Team Could potentially break due to third-party changes. No antispam automated test.
TaxCloud integration for US sales tax None None Could potentially break due to third-party changes. No _api_ecommerce_tax automated test.
TaxJar integration for sales tax Composr Core Development Team None Could potentially break due to third-party changes. No _api_ecommerce_tax automated test.
Textmate integration Composr Core Development Team None Needs to be separately tested. Needs a testing platform. No None
Mobile mode support Composr Core Development Team Composr Core Development Team Needs to be separately tested. Liable to break due to cross-cutting complexity. No None
Custom print layout support in default theme Composr Core Development Team None Not regularly tested. No None
Right-to-left support in default theme None None Not regularly tested. No None
Theme Upgrader None None There is code to upgrade themes built into the upgrader but it manually needs writing out for between-version upgrades. No None
Theme Wizard Composr Core Development Team Composr Core Development Team It is easy for the Theme Wizard to break if not tested after CSS changes. No None
Theme Wizard: Extreme seeds Composr Core Development Team None Using extremely bright seeds on a light theme or extremely dark seeds on a dark theme may result in elements which are hard to see. No None
Timezone list Composr Core Development Team Composr Core Development Team None No None
Tornevall integration Composr Core Development Team None Could potentially break due to third-party changes. No antispam automated test.
E-mail+IP two-factor authentication Composr Core Development Team None None No None
Vimeo media None None Not regularly tested. Could potentially break due to third-party changes. No None
YouTube media Composr Core Development Team None Not regularly tested. Could potentially break due to third-party changes. No None

Non-bundled addons

The default assumption for non-bundled addons if they are not listed should be that no non-bundled addon is supported to the same level of reliability and quality as Composr itself.

Title Actively Bug-Fixed by Actively Maintained by Notes Non-bundled addon Testing automation
AWS SES notifications None None Not regularly tested. Could potentially break due to third-party changes. Yes aws_ses automated test
Cloudinary integration None None Not regularly tested. Could potentially break due to third-party changes. Yes _api_cloudinary automated test
Composr Mobile SDK Android and iOS notifications handling None None None Yes None
Confluence integration PDStig, LLC None Not regularly tested. Out-dated as Atlassian no longer supports self-hosted server instances. Yes _api_confluence automated test
Early access non-bundled addon None None Not regularly tested. Needs a sponsor for regular maintenance. Yes None
Facebook integration Composr Core Development Team Composr Core Development Team Could potentially break due to third-party changes. Yes None
Facebook media (video embed) Composr Core Development Team None Could potentially break due to third-party changes. Yes None
Google maps (DataMappr, UserMappr) Composr Core Development Team None Could potentially break due to third-party changes. Yes None
Hybridauth login and syndication Composr Core Development Team None Could potentially break due to third-party changes, but we rely on the Hybridauth project to fix any issues and are involved in that project. Yes None
Karma non-bundled addon PDStig, LLC PDStig, LLC None Yes None
OpenWeatherMap Composr Core Development Team None None Yes _api_weather automated test.
Ratings structure None None Not regularly tested. Only available via custom programming / the custom_ratings addon. Yes None
Sugar CRM integration None None Not regularly tested. Could potentially break due to third-party changes. Yes SugarCRM Health Check
Tapatalk None None Could potentially break due to third-party changes. Yes None
Transifex integration Composr Core Development Team Composr Core Development Team Could potentially break due to third-party changes. Yes _api_transifex automated test. Part of release process.
WebDav access for The Repository Composr Core Development Team None Could potentially break due to third-party changes. Yes webdav automated test.

If you want a non-bundled addon receive on-going maintenance you can request to sponsor it. Most non-bundled addons will regardless be supported by critical bug fixes, and automatically updated as Composr APIs change – but not to the normal expected quality, and not proactively tested.

If the core developers feel there is not a use for a non-bundled addon any longer, and there is no interest in sponsoring its maintenance, the addon may be pulled from the main repository and archived on GitLab. This is so the core developers do not have to continue implementing critical bug fixes / API changes for a non-bundled addon which is likely being rarely used if at all. See this tracker issue for an ongoing list of non-bundled addons nominated for archiving / removal, and to discuss them.

Third-party software

The above list does not include third-party software (such as CKEditor) that is directly integrated into Composr. We do not usually take direct responsibility for improving this software or for regularly re-synching it. Sponsors may therefore want to consider sponsoring upstream projects too, and sponsoring refreshes of those within Composr. A list of third-party software may be found on the Sync with upstream tracker issue.